source3/utils/net_lookup.c

   1 /*
   2    Samba Unix/Linux SMB client library
   3    net lookup command
   4    Copyright (C) 2001 Andrew Tridgell (tridge@samba.org)
   5
   6    This program is free software; you can redistribute it and/or modify
   7    it under the terms of the GNU General Public License as published by
   8    the Free Software Foundation; either version 3 of the License, or
   9    (at your option) any later version.
  10
  11    This program is distributed in the hope that it will be useful,
  12    but WITHOUT ANY WARRANTY; without even the implied warranty of
  13    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  14    GNU General Public License for more details.
  15
  16    You should have received a copy of the GNU General Public License
  17    along with this program.  If not, see <http://www.gnu.org/licenses/>.  */
  18
  19 #include "includes.h"
  20 #include "utils/net.h"
  21 #include "libads/sitename_cache.h"
  22
  23 int net_lookup_usage(struct net_context *c, int argc, const char **argv)
  24 {
  25         d_printf(_(
  26 "  net lookup [host] HOSTNAME[#<type>]\n\tgives IP for a hostname\n\n"
  27 "  net lookup ldap [domain]\n\tgives IP of domain's ldap server\n\n"
  28 "  net lookup kdc [realm]\n\tgives IP of realm's kerberos KDC\n\n"
  29 "  net lookup pdc [domain|realm]\n\tgives IP of realm's kerberos KDC\n\n"
  30 "  net lookup dc [domain]\n\tgives IP of domains Domain Controllers\n\n"
  31 "  net lookup master [domain|wg]\n\tgive IP of master browser\n\n"
  32 "  net lookup name [name]\n\tLookup name's sid and type\n\n"
  33 "  net lookup sid [sid]\n\tGive sid's name and type\n\n"
  34 "  net lookup dsgetdcname [name] [flags] [sitename]\n\n"
  35 ));
  36         return -1;
  37 }
  38
  39 /* lookup a hostname giving an IP */
  40 static int net_lookup_host(struct net_context *c, int argc, const char **argv)
  41 {
  42         struct sockaddr_storage ss;
  43         int name_type = 0x20;
  44         char addr[INET6_ADDRSTRLEN];
  45         const char *name = argv[0];
  46         char *p;
  47
  48         if (argc == 0)
  49                 return net_lookup_usage(c, argc, argv);
  50
  51         p = strchr_m(name,'#');
  52         if (p) {
  53                 *p = '\0';
  54                 sscanf(++p,"%x",&name_type);
  55         }
  56
  57         if (!resolve_name(name, &ss, name_type, false)) {
  58                 /* we deliberately use DEBUG() here to send it to stderr
  59                    so scripts aren't mucked up */
  60                 DEBUG(0,("Didn't find %s#%02x\n", name, name_type));
  61                 return -1;
  62         }
  63
  64         print_sockaddr(addr, sizeof(addr), &ss);
  65         d_printf("%s\n", addr);
  66         return 0;
  67 }
  68
  69 #ifdef HAVE_ADS
  70 static void print_ldap_srvlist(struct dns_rr_srv *dclist, int numdcs )
  71 {
  72         struct sockaddr_storage ss;
  73         int i;
  74
  75         for ( i=0; i<numdcs; i++ ) {
  76                 if (resolve_name(dclist[i].hostname, &ss, 0x20, true) ) {
  77                         char addr[INET6_ADDRSTRLEN];
  78                         print_sockaddr(addr, sizeof(addr), &ss);
  79 #ifdef HAVE_IPV6
  80                         if (ss.ss_family == AF_INET6) {
  81                                 d_printf("[%s]:%d\n", addr, dclist[i].port);
  82                         }
  83 #endif
  84                         if (ss.ss_family == AF_INET) {
  85                                 d_printf("%s:%d\n", addr, dclist[i].port);
  86                         }
  87                 }
  88         }
  89 }
  90 #endif
  91
  92 static int net_lookup_ldap(struct net_context *c, int argc, const char **argv)
  93 {
  94 #ifdef HAVE_ADS
  95         const char *domain;
  96         struct sockaddr_storage ss;
  97         struct dns_rr_srv *dcs = NULL;
  98         int numdcs = 0;
  99         char *sitename;
 100         TALLOC_CTX *ctx;
 101         NTSTATUS status;
 102         int ret;
 103         char h_name[MAX_DNS_NAME_LENGTH];
 104
 105         if (argc > 0)
 106                 domain = argv[0];
 107         else
 108                 domain = c->opt_target_workgroup;
 109
 110         sitename = sitename_fetch(domain);
 111
 112         if ( (ctx = talloc_init("net_lookup_ldap")) == NULL ) {
 113                 d_fprintf(stderr,"net_lookup_ldap: talloc_init() %s!\n",
 114                           _("failed"));
 115                 SAFE_FREE(sitename);
 116                 return -1;
 117         }
 118
 119         DEBUG(9, ("Lookup up ldap for domain %s\n", domain));
 120
 121         status = ads_dns_query_dcs( ctx, domain, sitename, &dcs, &numdcs );
 122         if ( NT_STATUS_IS_OK(status) && numdcs ) {
 123                 print_ldap_srvlist(dcs, numdcs);
 124                 TALLOC_FREE( ctx );
 125                 SAFE_FREE(sitename);
 126                 return 0;
 127         }
 128
 129         DEBUG(9, ("Looking up PDC for domain %s\n", domain));
 130         if (!get_pdc_ip(domain, &ss)) {
 131                 TALLOC_FREE( ctx );
 132                 SAFE_FREE(sitename);
 133                 return -1;
 134         }
 135
 136         ret = sys_getnameinfo((struct sockaddr *)&ss,
 137                         sizeof(struct sockaddr_storage),
 138                         h_name, sizeof(h_name),
 139                         NULL, 0,
 140                         NI_NAMEREQD);
 141
 142         if (ret) {
 143                 TALLOC_FREE( ctx );
 144                 SAFE_FREE(sitename);
 145                 return -1;
 146         }
 147
 148         DEBUG(9, ("Found PDC with DNS name %s\n", h_name));
 149         domain = strchr(h_name, '.');
 150         if (!domain) {
 151                 TALLOC_FREE( ctx );
 152                 SAFE_FREE(sitename);
 153                 return -1;
 154         }
 155         domain++;
 156
 157         DEBUG(9, ("Looking up ldap for domain %s\n", domain));
 158
 159         status = ads_dns_query_dcs( ctx, domain, sitename, &dcs, &numdcs );
 160         if ( NT_STATUS_IS_OK(status) && numdcs ) {
 161                 print_ldap_srvlist(dcs, numdcs);
 162                 TALLOC_FREE( ctx );
 163                 SAFE_FREE(sitename);
 164                 return 0;
 165         }
 166
 167         TALLOC_FREE( ctx );
 168         SAFE_FREE(sitename);
 169
 170         return -1;
 171 #endif
 172         DEBUG(1,("No ADS support\n"));
 173         return -1;
 174 }
 175
 176 static int net_lookup_dc(struct net_context *c, int argc, const char **argv)
 177 {
 178         struct ip_service *ip_list;
 179         struct sockaddr_storage ss;
 180         char *pdc_str = NULL;
 181         const char *domain = NULL;
 182         char *sitename = NULL;
 183         int count, i;
 184         char addr[INET6_ADDRSTRLEN];
 185         bool sec_ads = (lp_security() == SEC_ADS);
 186
 187         if (sec_ads) {
 188                 domain = lp_realm();
 189         } else {
 190                 domain = c->opt_target_workgroup;
 191         }
 192
 193         if (argc > 0)
 194                 domain=argv[0];
 195
 196         /* first get PDC */
 197         if (!get_pdc_ip(domain, &ss))
 198                 return -1;
 199
 200         print_sockaddr(addr, sizeof(addr), &ss);
 201         if (asprintf(&pdc_str, "%s", addr) == -1) {
 202                 return -1;
 203         }
 204         d_printf("%s\n", pdc_str);
 205
 206         sitename = sitename_fetch(domain);
 207         if (!NT_STATUS_IS_OK(get_sorted_dc_list(domain, sitename,
 208                                         &ip_list, &count, sec_ads))) {
 209                 SAFE_FREE(pdc_str);
 210                 SAFE_FREE(sitename);
 211                 return 0;
 212         }
 213         SAFE_FREE(sitename);
 214         for (i=0;i<count;i++) {
 215                 print_sockaddr(addr, sizeof(addr), &ip_list[i].ss);
 216                 if (!strequal(pdc_str, addr))
 217                         d_printf("%s\n", addr);
 218         }
 219         SAFE_FREE(pdc_str);
 220         return 0;
 221 }
 222
 223 static int net_lookup_pdc(struct net_context *c, int argc, const char **argv)
 224 {
 225         struct sockaddr_storage ss;
 226         char *pdc_str = NULL;
 227         const char *domain;
 228         char addr[INET6_ADDRSTRLEN];
 229
 230         if (lp_security() == SEC_ADS) {
 231                 domain = lp_realm();
 232         } else {
 233                 domain = c->opt_target_workgroup;
 234         }
 235
 236         if (argc > 0)
 237                 domain=argv[0];
 238
 239         /* first get PDC */
 240         if (!get_pdc_ip(domain, &ss))
 241                 return -1;
 242
 243         print_sockaddr(addr, sizeof(addr), &ss);
 244         if (asprintf(&pdc_str, "%s", addr) == -1) {
 245                 return -1;
 246         }
 247         d_printf("%s\n", pdc_str);
 248         SAFE_FREE(pdc_str);
 249         return 0;
 250 }
 251
 252
 253 static int net_lookup_master(struct net_context *c, int argc, const char **argv)
 254 {
 255         struct sockaddr_storage master_ss;
 256         const char *domain = c->opt_target_workgroup;
 257         char addr[INET6_ADDRSTRLEN];
 258
 259         if (argc > 0)
 260                 domain=argv[0];
 261
 262         if (!find_master_ip(domain, &master_ss))
 263                 return -1;
 264         print_sockaddr(addr, sizeof(addr), &master_ss);
 265         d_printf("%s\n", addr);
 266         return 0;
 267 }
 268
 269 static int net_lookup_kdc(struct net_context *c, int argc, const char **argv)
 270 {
 271 #ifdef HAVE_KRB5
 272         krb5_error_code rc;
 273         krb5_context ctx;
 274         struct sockaddr_in *addrs;
 275         int num_kdcs,i;
 276         krb5_data realm;
 277         char **realms;
 278
 279         initialize_krb5_error_table();
 280         rc = krb5_init_context(&ctx);
 281         if (rc) {
 282                 DEBUG(1,("krb5_init_context failed (%s)\n",
 283                          error_message(rc)));
 284                 return -1;
 285         }
 286
 287         if (argc>0) {
 288                 realm.data = CONST_DISCARD(char *, argv[0]);
 289                 realm.length = strlen(argv[0]);
 290         } else if (lp_realm() && *lp_realm()) {
 291                 realm.data = lp_realm();
 292                 realm.length = strlen((const char *)realm.data);
 293         } else {
 294                 rc = krb5_get_host_realm(ctx, NULL, &realms);
 295                 if (rc) {
 296                         DEBUG(1,("krb5_gethost_realm failed (%s)\n",
 297                                  error_message(rc)));
 298                         return -1;
 299                 }
 300                 realm.data = (char *) *realms;
 301                 realm.length = strlen((const char *)realm.data);
 302         }
 303
 304         rc = smb_krb5_locate_kdc(ctx, &realm, (struct sockaddr **)(void *)&addrs, &num_kdcs, 0);
 305         if (rc) {
 306                 DEBUG(1, ("smb_krb5_locate_kdc failed (%s)\n", error_message(rc)));
 307                 return -1;
 308         }
 309         for (i=0;i<num_kdcs;i++)
 310                 if (addrs[i].sin_family == AF_INET)
 311                         d_printf("%s:%hd\n", inet_ntoa(addrs[i].sin_addr),
 312                                  ntohs(addrs[i].sin_port));
 313         return 0;
 314
 315 #endif
 316         DEBUG(1, ("No kerberos support\n"));
 317         return -1;
 318 }
 319
 320 static int net_lookup_name(struct net_context *c, int argc, const char **argv)
 321 {
 322         const char *dom, *name;
 323         DOM_SID sid;
 324         enum lsa_SidType type;
 325
 326         if (argc != 1) {
 327                 d_printf("%s\n%s",
 328                          _("Usage:"),
 329                          _(" net lookup name <name>\n"));
 330                 return -1;
 331         }
 332
 333         if (!lookup_name(talloc_tos(), argv[0], LOOKUP_NAME_ALL,
 334                          &dom, &name, &sid, &type)) {
 335                 d_printf(_("Could not lookup name %s\n"), argv[0]);
 336                 return -1;
 337         }
 338
 339         d_printf("%s %d (%s) %s\\%s\n", sid_string_tos(&sid),
 340                  type, sid_type_lookup(type), dom, name);
 341         return 0;
 342 }
 343
 344 static int net_lookup_sid(struct net_context *c, int argc, const char **argv)
 345 {
 346         const char *dom, *name;
 347         DOM_SID sid;
 348         enum lsa_SidType type;
 349
 350         if (argc != 1) {
 351                 d_printf("%s\n%s",
 352                          _("Usage:"),
 353                          _(" net lookup sid <sid>\n"));
 354                 return -1;
 355         }
 356
 357         if (!string_to_sid(&sid, argv[0])) {
 358                 d_printf(_("Could not convert %s to SID\n"), argv[0]);
 359                 return -1;
 360         }
 361
 362         if (!lookup_sid(talloc_tos(), &sid,
 363                         &dom, &name, &type)) {
 364                 d_printf(_("Could not lookup name %s\n"), argv[0]);
 365                 return -1;
 366         }
 367
 368         d_printf("%s %d (%s) %s\\%s\n", sid_string_tos(&sid),
 369                  type, sid_type_lookup(type), dom, name);
 370         return 0;
 371 }
 372
 373 static int net_lookup_dsgetdcname(struct net_context *c, int argc, const char **argv)
 374 {
 375         NTSTATUS status;
 376         const char *domain_name = NULL;
 377         const char *site_name = NULL;
 378         uint32_t flags = 0;
 379         struct netr_DsRGetDCNameInfo *info = NULL;
 380         TALLOC_CTX *mem_ctx;
 381         char *s = NULL;
 382
 383         if (argc < 1 || argc > 3) {
 384                 d_printf("%s\n%s",
 385                          _("Usage:"),
 386                          _(" net lookup dsgetdcname "
 387                            "<name> <flags> <sitename>\n"));
 388                 return -1;
 389         }
 390
 391         mem_ctx = talloc_init("net_lookup_dsgetdcname");
 392         if (!mem_ctx) {
 393                 return -1;
 394         }
 395
 396         domain_name = argv[0];
 397
 398         if (argc >= 2)
 399                 sscanf(argv[1], "%x", &flags);
 400
 401         if (!flags) {
 402                 flags |= DS_DIRECTORY_SERVICE_REQUIRED;
 403         }
 404
 405         if (argc == 3) {
 406                 site_name = argv[2];
 407         }
 408
 409         status = dsgetdcname(mem_ctx, NULL, domain_name, NULL, site_name,
 410                              flags, &info);
 411         if (!NT_STATUS_IS_OK(status)) {
 412                 d_printf(_("failed with: %s\n"), nt_errstr(status));
 413                 TALLOC_FREE(mem_ctx);
 414                 return -1;
 415         }
 416
 417         s = NDR_PRINT_STRUCT_STRING(mem_ctx, netr_DsRGetDCNameInfo, info);
 418         printf("%s\n", s);
 419         TALLOC_FREE(s);
 420
 421         TALLOC_FREE(mem_ctx);
 422         return 0;
 423 }
 424
 425
 426 /* lookup hosts or IP addresses using internal samba lookup fns */
 427 int net_lookup(struct net_context *c, int argc, const char **argv)
 428 {
 429         int i;
 430
 431         struct functable table[] = {
 432                 {"HOST", net_lookup_host},
 433                 {"LDAP", net_lookup_ldap},
 434                 {"DC", net_lookup_dc},
 435                 {"PDC", net_lookup_pdc},
 436                 {"MASTER", net_lookup_master},
 437                 {"KDC", net_lookup_kdc},
 438                 {"NAME", net_lookup_name},
 439                 {"SID", net_lookup_sid},
 440                 {"DSGETDCNAME", net_lookup_dsgetdcname},
 441                 {NULL, NULL}
 442         };
 443
 444         if (argc < 1) {
 445                 d_printf(_("\nUsage: \n"));
 446                 return net_lookup_usage(c, argc, argv);
 447         }
 448         for (i=0; table[i].funcname; i++) {
 449                 if (StrCaseCmp(argv[0], table[i].funcname) == 0)
 450                         return table[i].fn(c, argc-1, argv+1);
 451         }
 452
 453         /* Default to lookup a hostname so 'net lookup foo#1b' can be
 454            used instead of 'net lookup host foo#1b'.  The host syntax
 455            is a bit confusing as non #00 names can't really be
 456            considered hosts as such. */
 457
 458         return net_lookup_host(c, argc, argv);
 459 }